Ecopetrol
Cyberattack stole data tied to approximately 3,300 user accounts at Colombian state energy company
2024 Data Breaches (1076 indexed)
Fortinet FortiGate
73,932 FortiGate firewalls exposed with valid administrative and VPN credentials in FortiBleed campaign
McLaren Health Care
Two ransomware attacks in 2023 and 2024 affecting 3.2 million patients, settled class-action for $14M
Framework
Data breach exposed all customers' names, email addresses, phone numbers, and physical addresses
Abbott Laboratories
Cyber incident affecting medical device company; investigating data breach affecting patient information
PowerSchool
December 2024 breach exposed student and staff data from thousands of schools
Trizetto Provider Solutions
Unauthorized access to IT environment exposed PHI of 3.4 million individuals
Estée Lauder
Data breach tied to Oracle EBS vulnerability; exposed HR and operational data from company systems
FirstClass (Australian travel agency)
Customer records allegedly breached; threat actor claims on underground forums
Suno
Customer records and AI model training data exposed; notification delays reported
Qantas
5.67 million customer records exposed via vishing attack including personal and travel information
Revolut
75 million customer records including credit card data allegedly exposed for sale
River Financial Corporation
Ransomware attack; hackers stole data and later confirmed deletion
Ernst & Young
Names, addresses, SSNs, and financial information stolen from third-party platform
Meta
2018 data breach; EU privacy regulator fined Meta 251 million euros for violations
Gaming Accounts (Multiple)
Over 11 million gaming account credentials exposed in 2024 data leaks
UnitedHealthcare
2024 cyberattack exposing sensitive health and insurance data from millions of patients
South Florida Injury Centers
Data breach exposed 1,525 records including SSNs and medical records (PHI/PII)
PowerSchool
Dec 2024 cyberattack exposed student and staff data from thousands of schools
Mizuno
2024 ransomware attack and data breach affecting customers
Metabase
ShinyHunters claimed hacking Metabase, exploiting zero-day to access connected databases
LiteLLM
Supply chain attack: LiteLLM compromised through Trivy hack, distributed information-stealing malware to 2,500+ organizations
Canada Life
Threat actor claims 5.5 million records for sale including customer, employee, and corporate data
Krispy Kreme
Play ransomware attack disrupted online ordering systems
View incident → Indexed 1 year, 8 months ago